$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft File: djUTLn1AWlRkWzst-y4KA9_0VsM.mft (raw, json) Hash identifier: U3VfaP0DKM0grc/8sZip87z57NHKAllHlK0L7o9tAv4= Subject key identifier: 0F:CA:44:98:72:44:24:A5:99:E6:13:32:6D:64:BC:65:28:C9:DF:39 Authority key identifier: 76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3 Certificate issuer: /CN=A91F6799/serialNumber=7635132E7D405A54645B3B2DFB2E0A03DFF456C3 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft Manifest number: D0 Signing time: Sun 19 Oct 2025 08:46:53 +0000 Manifest this update: Sun 19 Oct 2025 08:46:52 +0000 Manifest next update: Sun 26 Oct 2025 08:46:52 +0000 Files and hashes: 1: djUTLn1AWlRkWzst-y4KA9_0VsM.crl (hash: sW2R8Ta12r4ginug+hpcAEg/MPQkgCMg50ZYOySoRy4=) 2: F13B6A3C70A711EFBA8AFF10C4F9AE02.roa (hash: Q9yPm3gs8BRfJ5g6BfqBpNgsQGDHcY41Tws1eH6Cg1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.crl rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6799, serialNumber=7635132E7D405A54645B3B2DFB2E0A03DFF456C3 Validity Not Before: Oct 19 08:46:52 2025 GMT Not After : Oct 26 08:46:52 2025 GMT Subject: CN=68f4a57c-bdef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8a:88:39:86:67:66:7d:a2:6f:71:2b:c4:39: 50:59:7c:ce:c9:1a:1f:57:34:2a:53:8e:40:67:88: 8a:f0:e9:fc:e4:92:b6:50:f3:03:75:cd:47:b2:c4: c4:79:37:bc:d7:79:09:44:f5:78:bc:36:9a:9b:d9: 08:0f:70:c1:9f:34:4e:70:37:72:b8:73:e9:6c:e3: b2:70:f2:34:45:7c:e3:24:5d:c0:33:fa:e1:a8:70: c2:72:24:02:d3:c5:25:fe:52:51:a8:a3:15:46:d2: 17:dc:08:9e:ae:2b:2c:30:f7:20:72:37:8c:4e:5e: 0d:4e:d4:25:de:7c:4b:5a:b3:2d:3a:0a:bd:d8:df: 1f:1c:81:33:7b:fe:43:e1:d3:fd:5e:9b:a2:74:25: 99:78:24:20:3d:71:dd:03:40:a3:b8:04:a8:b4:5a: bf:a1:d0:08:b1:60:97:8d:f5:03:93:78:da:7f:40: 0b:88:5f:c4:1a:b2:f8:b7:64:43:5c:5d:15:23:1a: 6f:e7:a3:ae:6f:a0:b8:a9:bf:37:11:f4:fc:72:ce: 8f:c3:9c:03:93:83:95:34:76:1f:e6:2f:3e:6d:f9: 94:35:e9:f6:fe:1a:a5:de:65:db:2e:5e:55:c7:86: 61:ec:24:52:b5:42:f4:49:53:db:ff:f8:4f:84:06: 5e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CA:44:98:72:44:24:A5:99:E6:13:32:6D:64:BC:65:28:C9:DF:39 X509v3 Authority Key Identifier: keyid:76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:02:c1:2c:70:d0:82:6b:02:c4:8a:bd:6c:ff:f8:45:a7:c2: e7:a5:bd:f7:09:ba:72:36:e7:bd:a2:9b:78:d2:cf:f6:15:4b: 19:c3:07:46:56:e9:58:06:35:dc:e3:a6:03:af:7e:66:e0:d5: 51:65:f8:53:48:a8:b2:ea:24:d1:01:9c:1d:ff:18:9d:e7:72: f2:47:b9:65:4a:34:b4:8d:35:a2:27:b6:8c:16:7f:76:05:67: 76:51:b8:f6:96:47:3e:e8:c2:62:8f:95:3d:09:48:2a:22:9f: e1:f6:ae:8b:4e:8a:2b:fd:4b:9a:aa:eb:50:45:1d:b9:39:0f: 34:5f:86:4a:c6:91:99:a6:aa:81:a7:7d:c8:3a:fd:86:f0:c2: ef:69:2f:cd:d9:5b:98:c0:6d:9a:5c:be:46:3a:47:80:da:3f: 09:61:79:fd:a5:5a:7e:40:51:2e:bd:4c:4d:31:3a:56:fa:c9: 68:ce:2a:b9:d2:49:47:ef:74:4c:f6:5c:e4:37:11:3b:6b:31: 8f:18:2e:7f:8e:ee:9a:7c:62:0e:ec:a4:2f:2b:ab:12:f1:ad: b4:89:67:c8:cc:d0:27:9c:6e:63:80:cb:42:7e:38:1a:8f:5d: 8f:4c:fd:93:06:15:00:33:24:0f:57:a3:f1:6d:c0:91:17:71: 38:c8:29:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3OTkxMTAvBgNVBAUTKDc2MzUxMzJFN0Q0MDVBNTQ2NDVCM0IyREZCMkUwQTAz REZGNDU2QzMwHhcNMjUxMDE5MDg0NjUyWhcNMjUxMDI2MDg0NjUyWjAYMRYwFAYD VQQDEw02OGY0YTU3Yy1iZGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYqIOYZnZn2ib3ErxDlQWXzOyRofVzQqU45AZ4iK8On85JK2UPMDdc1HssTE eTe813kJRPV4vDaam9kID3DBnzROcDdyuHPpbOOycPI0RXzjJF3AM/rhqHDCciQC 08Ul/lJRqKMVRtIX3AierissMPcgcjeMTl4NTtQl3nxLWrMtOgq92N8fHIEze/5D 4dP9XpuidCWZeCQgPXHdA0CjuASotFq/odAIsWCXjfUDk3jaf0ALiF/EGrL4t2RD XF0VIxpv56Oub6C4qb83EfT8cs6Pw5wDk4OVNHYf5i8+bfmUNen2/hql3mXbLl5V x4Zh7CRStUL0SVPb//hPhAZebwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/KRJhy RCSlmeYTMm1kvGUoyd85MB8GA1UdIwQYMBaAFHY1Ey59QFpUZFs7LfsuCgPf9FbD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjc5OS9FRDlFNjBCMjcw OUYxMUVGQTU3MEJFNERDNEY5QUUwMi9kalVUTG4xQVdsUmtXenN0LXk0S0E5XzBW c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RqVVRMbjFBV2xSa1d6c3QteTRLQTlfMFZzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Njc5OS9FRDlFNjBCMjcwOUYxMUVGQTU3MEJFNERDNEY5QUUwMi9kalVUTG4xQVds UmtXenN0LXk0S0E5XzBWc00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcAsEscNCCawLEir1s//hFp8Lnpb33CbpyNue9opt40s/2FUsZwwdG VulYBjXc46YDr35m4NVRZfhTSKiy6iTRAZwd/xid53LyR7llSjS0jTWiJ7aMFn92 BWd2Ubj2lkc+6MJij5U9CUgqIp/h9q6LToor/UuaqutQRR25OQ80X4ZKxpGZpqqB p33IOv2G8MLvaS/N2VuYwG2aXL5GOkeA2j8JYXn9pVp+QFEuvUxNMTpW+sloziq5 0klH73RM9lzkNxE7azGPGC5/ju6afGIO7KQvK6sS8a20iWfIzNAnnG5jgMtCfjga j12PTP2TBhUAMyQPV6PxbcCRF3E4yCkr -----END CERTIFICATE-----Generated at Tue Oct 21 04:49:40 2025 by rpki-client